This password-stealing malware just added a new way to infect your PC